A manual certificate signing request (CSR) is created and sent to an external CA who verified the contents and creates an identity certificate signed by the CA.
Once the identity certificate/private key is obtained, IP Office Manager or IP Office Web Manager can be used to administer it on IP Office: